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... nothing, but it enables the voter, or perhaps proxies acting on her behalf, to verify that the receipt 

is correctly input into the ... A earlier version of Pret 'a Voter presented in [33] used EIGamal 

encryption, [15], and re-encryption mixes. ... El- Gamal is a randomising encryption algorithm. ... 
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Deterring voluntary trace disclosure in re-encryption mix-networks 

X Wang, P Golle, M Jakobsson... - ACM Transactions on 2010 - portal.acm.org 
... Decryption of an EIGamal ciphertext (G, M) is computed by the expression M ■ G -x. One can 
re-encrypt a ciphertext (G, M) by choosing 5 R f- Z* q and eval- ... Page 10. 18:10 ■ X. Wang et 
al. ... Page 11. Deterring Voluntary Trace Disclosure in Re-encryption Mix-Networks • 18:11 ... 
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[PDF] Chaum's Visual Voting Scheme without RPC 

M Klonowski, M Kutytowski, A Lauks... - 2008 - Citeseer 

... In this paper, a method of shuffling El Gamal ciphertexts is presented - after processing a whole .. 
First, the last server presents the EIGamal ciphertext from which it has obtained m, say (a, b ... 
Duplicating an onion: Thanks to re-encryption features, a duplicate can be easily hid- den. ... 
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Parallel mixing 

P Golle, A Juels- Proceedings of the 11th ACM conference on ...,2004 -portal.acm.org 

... this paper, we consider exclusively re- encryption mixnets, ie mix networks that re-encrypt input 

ciphertexts and ... Our construction is applicable to any re-encryption mixnet whose costs are linear 

in the ... ful- filled by the mixnets of Furukawa and Sako [9], Neff [19], Jakobsson et al. ... 
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The security implications of VeriChip cloning 

J Halamka, A Juels... - Journal of the 2006-jamia.bmjjournals.com 

... If IDs are indeed assigned sequentially in production, for instance, then an attacker that observes 

the ID of one employee in a given corporation can probably guess the IDs ... El Gamal T. . A ... Okamoto 

T. Golle P,; Jakobsson M ,; Juels A,; Syverson P. . Universal re-encryption for mixnets ... 
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Pr»t a Voter with Paillier encryption 

PYA Ryan - Mathematical and Computer Modelling, 2008 - Elsevier 

... or perhaps proxies acting on her behalf, to verify that the receipt is correctly input into the ... a Voter 

receipts into a pure ciphertext term that can be put through a re-encryption mix. The disadvantage 

of exponential EIGamal is that we have to constrain the plaintext space in order to ... 

Related articles 

[PDF] A critical review of receipt-freeness and coercion-resistance [PDF] from scialert.net 

B Meng - Information Technology Journal, 2009 - scialert.net 
... Wikstrom (2005) introduced the first EI Gamal based mix-net in which each mix-server partially 
decrypts and permutes its input, called sender verifiability, ie, no reencryption is necessary. ... shuffle 
based on the Boneh-Goh-Nissim cryptosystem and a re-encryption shuffle based ... 
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... 38 3.3 Proxy re-encryption He presented sequential aggregate signature and sequential 

aggregate signed data schemes that offer numerous advantages over those of Lysyanskaya 
et al. ... [8] G. Neven. Efficient Sequential Aggregate Signed Data. In EUROCRYPT, pp. ... 

Related articles - View as HTML - All 2 versions 



Ipdfi A Bibliography of Publications on Cryptography: 2000-2009 [PDF] from u-aizu.ac.jp 

NHF Beebe-2010-u-aizu.ac.jp 

... efforts [Pau02a]. Eggs [Wei05]. EGPGV [MFS+09], Egypt [SinOO]. Eighth [ELvS01]. Einstein 
[MNT+00], EJB [TEM+01]. El Gamal [EKRMA01]. election [CalOOa], electronic [AvdHOO]. element 
[MS02a]. Elementary [Ste08]. Eleven [AII03]. EIGamal [BJN00]. EIGamal like [CWHOO], ... 
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N Mavrogiannopoulos, LAM Schoenmakers - Citeseer 

... Thus the expo- nentiations left are the one from Pedersen commitment and 4 exponentiations 
for the random re-encryption operations. Overall the computational complexity for exponentiations, 
including the El- Page 22. 2.5. CONDITIONAL GATE 15 Gamal decryption ste 
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